[Rdiff-backup-bugs] [bug #16897] Security Violation on first increment while using restrict-update-only

[dean gaudet]

Follow-up Comment #4, bug #16897 (project rdiff-backup):

i'm of very mixed opinion.

if you use a single key restricted to:

rdiff-backup --server --restrict-update-only /mnt/backups/ 

then *any* of the boxes which have that key can do whatever they want to any
of /mnt/backups/subdirs... i.e. they could erase some other server's backup.

personally i think this is a configuration not worth supporting -- it's not
secure.

the only configuration which works is to give a dedicated key to each of the
servers pushing a backup.

-dean

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?16897>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/